hunt-dispatch

Loads mode-specific offensive security skill sets for authorized red team and web application penetration testing engagements.

Updated May 29, 2026
One-click install
npx skills add https://github.com/hhjkjkjk/Claude-skills --skill hunt-dispatch-hhjkjkjk
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-dispatch
Source: https://github.com/hhjkjkjk/Claude-skills/tree/main/skills/hunt-dispatch
Command: npx skills add https://github.com/hhjkjkjk/Claude-skills --skill hunt-dispatch-hhjkjkjk

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? During an authorized security engagement, an orchestrator needs to decide which of dozens of attack-testing skills to load based on the engagement mode and the target's technology stack. Doing this manually is error-prone and inconsistent across sessions. ## Core Features & Use Cases - Target Fingerprinting: Runs a one-shot curl header check and parses recon live-hosts files to map signals (Okta, Microsoft 365, VMware, cloud providers, APKs) to the correct platform attack skills. - Mode-Based Skill Loading: Loads distinct skill sets for redteam mode (mindset, platform, high-impact hunt skills) versus wapt mode (full OWASP-oriented hunt set with blackbox or greybox handling). - Deterministic Taxonomy Print: Emits a plain-text, colon-delimited summary of every loaded skill grouped by category, then returns control to the /hunt orchestrator without running any probes itself. - Use Case: After confirming an engagement is a greybox web application penetration test, invoke this loader to fingerprint the target, load all 27 WAPT skills, apply captured credentials to authenticated tests, and print the session taxonomy. ## Quick Start Invoke hunt-dispatch with mode=wapt and box=greybox after the /hunt orchestrator confirms the engagement type to load the full web application testing skill set.

Frequently Asked Questions about hunt-dispatch

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I load the right penetration testing skills for an engagement?▼

Invoke hunt-dispatch with a mode parameter after the orchestrator confirms the engagement type. Use mode=redteam for red team operations or mode=wapt with box=blackbox or box=greybox for web application testing, and it loads the matching skill set automatically.

How does target fingerprinting select platform attack skills?▼

The loader runs a curl header request against the target and reads any recon live-hosts file, then maps detected signals to skills. For example, okta.com or auth0.com triggers okta-attack, while vsphere or vcenter indicators trigger vmware-vcenter-attack, and multiple matches load all corresponding skills.

What is the difference between redteam and wapt mode?▼

Redteam mode loads mindset and IR-detection skills first, then fingerprint-matched platform skills and 13 high-impact hunt skills, using the redteam-report-template format. Wapt mode loads the full 27-skill OWASP-oriented set with bb-methodology and triage-validation, using the report-writing format.

Does hunt-dispatch run attacks or probes against the target?▼

No, it only loads skill context and prints the taxonomy. After the taxonomy print it returns control to the /hunt orchestrator, which handles sibling delegation and active testing in later steps.

How are greybox credentials handled during a penetration test?▼

Greybox credentials are captured by the /hunt orchestrator and held only in session memory, never written to disk. The loader instructs that they be applied to every authenticated test, and privacy rules prohibit logging or persisting them.